Privacy Policy
Last updated: 2026-03-13 · Version 2026-03-13
1. Data Controller
Vekt is the data controller responsible for the personal data you submit through this recruitment platform. If you have any questions about how your data is handled, please contact us at [email protected].
2. Personal Data We Collect
When you submit a job application, we collect the following personal data:
- Full name
- Email address
- Resume / CV (PDF file)
- The job position you applied for
- Date and time of application
- Your consent record (timestamp and policy version)
3. Purpose and Legal Basis
We process your personal data for the following purposes:
Recruitment evaluation
Your application and resume are assessed to determine your suitability for the position. Legal basis: Consent (Art. 6(1)(a) GDPR) and steps prior to entering a contract (Art. 6(1)(b) GDPR).
Internal record-keeping
Maintaining records of applications and recruitment decisions. Legal basis: Legitimate interest (Art. 6(1)(f) GDPR).
Recruiter authentication
A session cookie is set when a recruiter logs in to maintain their authenticated session. This cookie is strictly necessary for the platform to function and is exempt from consent requirements under the ePrivacy Directive Art. 5(3). Legal basis: Legitimate interest / necessary for contract performance (Art. 6(1)(b) GDPR).
4. Cookies
This platform uses only strictly necessary cookies. No tracking, analytics, or advertising cookies are used.
| Cookie | Purpose | Duration |
|---|---|---|
| next-auth.session-token | Maintains your authenticated recruiter session | Session |
Because these cookies are strictly necessary for the service to function, they do not require your consent under the ePrivacy Directive. You will see an informational notice on your first visit acknowledging their use.
5. Data Retention
Candidate application data is retained for a limited period from the date of submission, after which it is permanently deleted from our systems. The exact retention window is configured by the platform administrator (default: 90 days). If you are hired, data relevant to your employment will be subject to a separate data retention policy.
6. Data Recipients
Your data is accessible only to authorised recruiters and hiring managers within Vekt. We do not share, sell, or transfer your data to third parties. All data is stored on servers under our direct control.
7. Your Rights
Under the GDPR you have the following rights:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — request deletion of your data (“right to be forgotten”)
- Restriction — ask us to limit how we use your data
- Portability — receive your data in a machine-readable format
- Object — object to processing based on legitimate interest
- Withdraw consent — withdraw your application consent at any time without affecting prior processing
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
8. Security
All data is transmitted over TLS (HTTPS). Access to candidate data is restricted to authenticated recruiters only. Resume files are stored securely on the server and are not publicly accessible without a direct link.
9. Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with your national supervisory authority (e.g. the ICO in the UK, or the relevant DPA in your EU member state).